a69cd81f6cd4b3d7fe7971dade53d861dffe56607c1fcd51699b80de7b2e56d4N

Sharing

Copy URL

Twitter E-mail

General

Target

a69cd81f6cd4b3d7fe7971dade53d861dffe56607c1fcd51699b80de7b2e56d4N
Size

127KB
MD5

3ea10fce94bb72f9778ca1903111c410
SHA1

008e6e0b72da6732e95ceb6943a79a63f82cae4a
SHA256

a69cd81f6cd4b3d7fe7971dade53d861dffe56607c1fcd51699b80de7b2e56d4
SHA512

f05b7439c8694f39602fd2c0c04a9752c82540749d3ec0a588e66cb6fa72a7494c60fd07800f66d2ab46822d2680a073967bb8356e9e2165f3250a95ed6983c4
SSDEEP

3072:o3Q0TS1NM/6I96vco3zbfJn5G9f6cVuF6:ocTvTDbfJn5G9xVu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a69cd81f6cd4b3d7fe7971dade53d861dffe56607c1fcd51699b80de7b2e56d4N

Files

a69cd81f6cd4b3d7fe7971dade53d861dffe56607c1fcd51699b80de7b2e56d4N
.dll windows:6 windows x64 arch:x64

584110f0e5ce238a9d4e4df3c9708073

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

pucaw.pdb

Imports

winamp

ord1094
ord1045
ord1031
ord1046
ord1091
ord1287
ord1289
ord1144
ord1029

vcruntime140

__C_specific_handler
memset
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_initterm
_execute_onexit_table
_seh_filter_dll
_crt_atexit
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_cexit
_register_onexit_function
_initterm_e

kernel32

CloseHandle
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

584110f0e5ce238a9d4e4df3c9708073

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winamp

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Sections

.text Size: 105KB - Virtual size: 105KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 888B

.reloc Size: 512B - Virtual size: 108B

.text
Size: 105KB - Virtual size: 105KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 512B - Virtual size: 108B